Perform application and network penetration testing across web, mobile, and APIs; embed AppSec into DevSecOps; build automation, tooling, and KPI dashboards; integrate security tools via APIs; drive remediation and secure coding practices across engineering teams.